Minimize reset password SMS expiry duration
Control the number of minutes remaining before the SMS code expires.
The password_reset.sms.expiry system property denotes the number of minutes before the SMS code expires.
Ensure the property password_reset.sms.expiry is set to 5 or less.
More information
| Attribute | Description |
|---|---|
| Configuration name | password_reset.sms.expiry |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Integer |
| Recommended value | An integer less than or equal to 5 |
| Default value | <none> |
| Fallback value | 5 |
| Category | Authentication |
| Security risk | - Severity score: 5.6 - CVSS rating: Medium - Security risk details: If the value is too high, an attacker may guess the SMS code to reset the password. |
| Functional impact | None |
| Dependencies and prerequisites | None |
Parent Topic:Authentication